CVEs published September 8, 2018
7 CVEs were published on September 8, 2018: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- github.com/ethereum/go-ethereum
- 1
Medium, low and unrated 7
- CVE-2018-16724An issue is discovered in baijiacms V4.
- CVE-2018-16725An issue is discovered in baijiacms V4.
- CVE-2018-16730\upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name.
- CVE-2018-16731CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then prov
- CVE-2018-16732\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
- CVE-2018-16733In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.github.com/ethereum/go-ethereum
- CVE-2018-16715An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479.